Merge remote-tracking branch 'origin/develop' into fix/cloud-rename-sidecar

Author: Gnathonic

.github/workflows/ci.yml

@@ -2,9 +2,9 @@ name: CI
 
 on:
   push:
-    branches: [main]
+    branches: [main, develop]
   pull_request:
-    branches: [main]
+    branches: [main, develop]
 
 jobs:
   lint:
@@ -98,7 +98,8 @@ jobs:
   release-check:
     name: Release Check
     runs-on: ubuntu-latest
-    if: github.event_name == 'pull_request'
+    # Only relevant for release PRs (develop -> main); skip on PRs into develop.
+    if: github.event_name == 'pull_request' && github.base_ref == 'main'
     steps:
       - uses: actions/checkout@v4
         with:

.github/workflows/pr-target-guard.yml

@@ -4,11 +4,16 @@ on:
   pull_request_target:
     types: [opened, reopened, synchronize]
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
-  # Block any PR to main that doesn't come from develop
+  # Block any PR to main that doesn't come from develop (non-fork branches only;
+  # forks are handled by redirect-forks below to avoid a duplicate message).
   require-develop-to-main:
     runs-on: ubuntu-latest
-    if: github.event.pull_request.base.ref == 'main' && github.event.pull_request.head.ref != 'develop'
+    if: github.event.pull_request.base.ref == 'main' && github.event.pull_request.head.ref != 'develop' && !github.event.pull_request.head.repo.fork
     steps:
       - name: Block non-develop PRs to main
         run: |

.github/workflows/release.yml

@@ -10,6 +10,10 @@ jobs:
   release:
     name: Release
     runs-on: ubuntu-latest
+    # The repo's default workflow token is read-only, so without this the job 403s
+    # when pushing the tag / creating the release (releases had to be made by hand).
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -55,8 +59,15 @@ jobs:
         id: release_notes
         run: |
           VERSION="${{ steps.version_check.outputs.current_version }}"
-          # Extract content between this version header and the next version header
-          NOTES=$(awk "/^## $VERSION/,/^## \[?[0-9]/" CHANGELOG.md | head -n -1 | tail -n +2)
+          # Print the body between this version's header and the next version header,
+          # excluding both headers. Handles both "## 1.2.3" and "## [1.2.3]" styles.
+          # (The old awk range failed because its end pattern also matched the start
+          # header, collapsing the range to a single line — release notes were empty.)
+          NOTES=$(awk -v ver="$VERSION" '
+            $0 ~ "^## \\[?" ver "([^0-9]|$)" { collecting = 1; next }
+            collecting && /^## \[?[0-9]/ { exit }
+            collecting { print }
+          ' CHANGELOG.md)
           # Use a delimiter for multiline output
           echo "notes<<EOF" >> $GITHUB_OUTPUT
           echo "$NOTES" >> $GITHUB_OUTPUT

CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## [1.7.4] - 2026-06-30
+
+### Added
+
+- Horizontal panning with wheel and touchpad (thanks @binaryBrandon)
+- MEGA two-factor authentication (2FA) login
+- Uploaded covers now show thumbnails in MEGA
+
+### Changed
+
+- MEGA support no longer held together with hope and duct tape
+- Faster MEGA downloads
+
 ## [1.7.3] - 2026-06-14
 
 ### Fixed